$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D9E0F5406B8911F0BC7A9F51C4F9AE02.roa File: D9E0F5406B8911F0BC7A9F51C4F9AE02.roa (raw, json) Hash identifier: poX4P+EEr/QfsrG2VSaHWv9uIMrgHriQ1FRVULKdPxU= Subject key identifier: 7B:5B:5F:92:25:B0:B4:B6:0E:BD:D3:43:8E:C5:37:BA:07:72:A2:C6 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1F29 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D9E0F5406B8911F0BC7A9F51C4F9AE02.roa Signing time: Mon 28 Jul 2025 08:07:06 +0000 ROA not before: Mon 28 Jul 2025 08:07:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152542 IP address blocks: 160.25.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7977 (0x1f29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 28 08:07:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68872faa-5eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:4b:35:a3:b3:e9:45:40:ed:6d:50:e1:f8: 5b:32:06:d6:48:a3:e8:2e:b5:cb:27:62:05:52:72: 36:6f:1e:38:ba:57:4d:71:1c:37:d0:1d:3c:71:d5: d6:9a:f5:a6:34:4e:26:7a:dd:d3:1c:5e:97:7b:0a: f7:d2:0b:ba:dd:b1:d6:14:55:16:5e:b6:ed:f0:10: c7:54:d3:54:07:d7:da:2c:fe:7d:a0:70:40:7a:44: e7:1d:56:57:81:38:2a:38:62:28:53:88:35:7f:9d: 5a:bf:5d:cc:56:e4:a3:04:91:30:92:ae:8a:8d:d3: c0:74:b2:f7:1b:71:7a:2b:99:e2:f2:c1:2d:a3:4e: 0b:da:db:6f:f5:11:d2:bd:36:01:80:47:9e:44:77: 2c:ce:18:4b:9a:77:49:23:f8:80:7d:79:a8:fb:21: af:ec:cb:a4:e7:41:3f:86:16:cd:1b:97:4a:16:02: 5d:31:a1:90:df:68:94:81:9d:ca:dc:10:15:32:e2: dd:7e:61:3f:d9:46:a0:1a:00:87:9b:e6:36:9d:21: 0a:18:4e:d0:74:32:60:88:87:b1:09:e5:27:71:c9: f2:e3:68:e5:21:e6:2b:e5:73:ec:3e:64:75:f7:64: 5b:9e:ac:ff:73:09:ec:de:49:9b:f7:0b:a7:38:b3: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5B:5F:92:25:B0:B4:B6:0E:BD:D3:43:8E:C5:37:BA:07:72:A2:C6 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D9E0F5406B8911F0BC7A9F51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.191.0/24 Signature Algorithm: sha256WithRSAEncryption 25:11:16:d1:8d:48:4c:34:a8:9b:cd:03:ef:46:60:55:62:fa: 7d:d9:4c:26:c0:18:93:b2:e8:d7:28:a7:25:b6:01:6e:aa:59: 44:4b:4f:c5:4c:7a:6c:5d:ed:ce:27:c4:ff:90:c6:6b:8e:8d: 00:88:f7:5c:dc:11:c9:3b:1d:d0:42:9d:b5:3e:4a:d5:15:0e: 15:45:f7:2e:f3:8d:1a:e4:b8:8c:9c:2b:e2:fe:2c:f5:db:4c: 08:63:18:2d:53:1f:e9:2e:20:b3:de:bc:a1:52:ed:c0:7e:44: c3:b3:a7:3c:9a:9f:3c:ed:5f:d9:ca:c7:90:1f:65:7a:67:f2: 65:c2:60:f5:d0:9b:42:bd:a7:9c:2e:bd:82:d2:e9:89:3a:04: d3:10:e5:69:0b:43:60:fa:6f:69:a0:d3:1e:c0:38:f4:aa:9f: b5:88:9a:25:4d:1c:76:71:88:68:49:53:21:73:2e:ae:73:58: 54:79:ee:12:b5:81:93:58:2f:fe:74:5b:42:44:59:57:c6:1f: b6:19:56:64:70:d9:03:17:20:14:1b:71:7b:d8:42:21:22:10: 93:18:e2:d6:8c:d8:24:56:42:21:3f:b6:45:0f:06:91:b1:5b: 19:0d:39:44:ff:3e:9d:ee:48:df:ab:ee:32:c4:9c:a9:8e:ac: 50:a1:9d:0e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNzI4MDgwNzA2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg3MmZhYS01ZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5VLNaOz6UVA7W1Q4fhbMgbWSKPoLrXLJ2IFUnI2bx44uldNcRw30B08cdXW mvWmNE4met3THF6Xewr30gu63bHWFFUWXrbt8BDHVNNUB9faLP59oHBAekTnHVZX gTgqOGIoU4g1f51av13MVuSjBJEwkq6KjdPAdLL3G3F6K5ni8sEto04L2ttv9RHS vTYBgEeeRHcszhhLmndJI/iAfXmo+yGv7Muk50E/hhbNG5dKFgJdMaGQ32iUgZ3K 3BAVMuLdfmE/2UagGgCHm+Y2nSEKGE7QdDJgiIexCeUnccny42jlIeYr5XPsPmR1 92Rbnqz/cwns3kmb9wunOLPMzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHtbX5Il sLS2Dr3TQ47FN7oHcqLGMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDlFMEY1NDA2 Qjg5MTFGMEJDN0E5RjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgGb8wDQYJKoZIhvcNAQELBQADggEBACURFtGNSEw0qJvN A+9GYFVi+n3ZTCbAGJOy6NcopyW2AW6qWURLT8VMemxd7c4nxP+QxmuOjQCI91zc Eck7HdBCnbU+StUVDhVF9y7zjRrkuIycK+L+LPXbTAhjGC1TH+kuILPevKFS7cB+ RMOzpzyanzztX9nKx5AfZXpn8mXCYPXQm0K9p5wuvYLS6Yk6BNMQ5WkLQ2D6b2mg 0x7AOPSqn7WImiVNHHZxiGhJUyFzLq5zWFR57hK1gZNYL/50W0JEWVfGH7YZVmRw 2QMXIBQbcXvYQiEiEJMY4taM2CRWQiE/tkUPBpGxWxkNOUT/Pp3uSN+r7jLEnKmO rFChnQ4= -----END CERTIFICATE-----Generated at Sun Aug 10 05:00:32 2025 by rpki-client